CVE-2023-52576
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range(). With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic. Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMar 2, 2024
First seenMar 2, 2024
Weakness typeCWE-416Use after free
How to fix
Update
- linux linux_kernel6.1.56, 6.5.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.13 ≤ v < 6.1.56, 6.2 ≤ v < 6.5.6, 6.6 | 6.1.56, 6.5.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.